$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c3e9995a-68fd-3f29-85c3-8d4f61dd7873.roa File: c3e9995a-68fd-3f29-85c3-8d4f61dd7873.roa (raw, json) Hash identifier: CUf4VvSKyRQMHULi/a5jxx/MFtT3hcefOBmxtd8od9c= Subject key identifier: 80:B9:17:23:2F:71:15:57:27:97:9E:E0:EF:3F:5C:D0:A5:42:97:A1 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584D2A74FC587F5063C4FA9ED580 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c3e9995a-68fd-3f29-85c3-8d4f61dd7873.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 64286 IP address blocks: 173.239.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:fc:58:7f:50:63:c4:fa:9e:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=2aa6375a-de7e-4980-a764-6fb9715a62f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e3:ce:e2:8d:00:06:2a:6b:f1:86:88:f5:de: 4b:12:64:bc:2f:01:78:b0:ab:89:e9:68:6a:b9:8c: 79:85:8c:b6:9d:3c:95:19:05:09:ac:d0:11:6f:e4: 26:ed:61:08:fa:22:8d:d8:40:bb:ce:bb:81:95:77: a6:b2:5c:75:08:dc:86:cb:f5:b6:46:b4:4f:fe:b4: b9:5b:e6:0d:c6:65:db:22:af:f7:fa:f8:7a:ab:01: 83:4d:1e:65:e1:bd:c2:57:b5:b2:2b:ed:d1:13:39: f0:3e:d6:94:61:22:ef:60:49:37:00:1b:3d:bf:1b: ac:f1:ba:24:6c:bf:47:9d:26:ba:c2:94:cc:5f:25: 72:bf:a6:71:39:ac:4a:18:9e:a8:94:c0:e8:6e:ad: 3b:29:88:9c:31:ad:61:da:08:f2:25:07:8a:d1:3d: 09:ee:66:9c:c6:bb:67:ae:82:7a:c2:39:20:92:a2: 54:3d:50:12:3e:1a:a7:1e:57:6a:36:f8:02:22:73: cd:a2:5c:31:5a:a2:78:17:ec:58:ad:43:f5:01:0b: 48:62:8e:52:a6:10:6b:f0:8c:e6:23:6c:71:ec:16: 49:26:05:0b:af:88:56:a2:47:dd:8a:b1:e0:04:47: 7a:d2:03:58:e1:c3:2c:cf:f7:d5:3d:27:b5:df:d4: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B9:17:23:2F:71:15:57:27:97:9E:E0:EF:3F:5C:D0:A5:42:97:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c3e9995a-68fd-3f29-85c3-8d4f61dd7873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:05:33:a8:f4:6a:e3:bd:3e:33:44:b6:50:2d:50:d5:cc:d6: 21:05:60:37:bc:e6:dd:7f:52:7a:73:fb:5d:b0:87:28:1b:77: d2:81:27:a3:92:d1:87:04:bf:76:72:0a:d2:c1:74:20:4c:d0: 22:b8:78:cf:ec:63:f9:26:1d:69:f5:3f:6f:32:e3:d3:30:7d: 16:a7:f7:03:eb:26:a7:6d:b0:55:48:22:98:f7:c1:79:6f:25: 82:a9:b1:40:b0:c8:0b:fc:cf:30:b4:91:62:00:8b:8a:39:c1: 1d:40:bd:a1:99:4d:2e:80:08:cf:db:d5:8b:50:25:73:1c:aa: 3f:0e:e9:af:c9:ae:64:83:3e:12:3f:b5:bf:d7:cc:a0:f0:5d: 79:8d:0d:4b:60:4f:6b:9c:38:70:f9:ae:b9:bf:31:d7:d5:d5: 60:42:9c:c4:b7:88:13:8f:33:00:27:09:6e:5d:1c:db:d8:be: ef:f3:5a:f4:5a:eb:d4:4e:f5:d8:c3:1c:fa:cf:e0:9e:c6:0d: a4:67:68:8c:ed:69:98:d1:20:4f:3f:c6:20:e3:a7:cc:2e:69: b2:0d:7d:94:11:c2:36:e9:66:77:5d:eb:32:96:99:8f:ab:4d: b2:4e:5b:cb:26:0c:9e:9c:19:1e:09:ad:21:fb:e5:ee:d4:1e: 4e:d3:bc:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPxYf1BjxPqe1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MmFhNjM3NWEtZGU3ZS00OTgwLWE3NjQtNmZiOTcxNWE2MmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOPO4o0ABipr8YaI9d5LEmS8LwF4sKuJ6Whq uYx5hYy2nTyVGQUJrNARb+Qm7WEI+iKN2EC7zruBlXemslx1CNyGy/W2RrRP/rS5 W+YNxmXbIq/3+vh6qwGDTR5l4b3CV7WyK+3REznwPtaUYSLvYEk3ABs9vxus8bok bL9HnSa6wpTMXyVyv6ZxOaxKGJ6olMDobq07KYicMa1h2gjyJQeK0T0J7macxrtn roJ6wjkgkqJUPVASPhqnHldqNvgCInPNolwxWqJ4F+xYrUP1AQtIYo5SphBr8Izm I2xx7BZJJgULr4hWokfdirHgBEd60gNY4cMsz/fVPSe139RnJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIC5FyMvcRVXJ5ee4O8/XNClQpehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYzNlOTk5NWEtNjhmZC0z ZjI5LTg1YzMtOGQ0ZjYxZGQ3ODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANEFM6j0auO9PjNEtlAtUNXM1iEFYDe85t1/Unpz+12whygbd9KBJ6OS 0YcEv3ZyCtLBdCBM0CK4eM/sY/kmHWn1P28y49MwfRan9wPrJqdtsFVIIpj3wXlv JYKpsUCwyAv8zzC0kWIAi4o5wR1AvaGZTS6ACM/b1YtQJXMcqj8O6a/JrmSDPhI/ tb/XzKDwXXmNDUtgT2ucOHD5rrm/MdfV1WBCnMS3iBOPMwAnCW5dHNvYvu/zWvRa 69RO9djDHPrP4J7GDaRnaIztaZjRIE8/xiDjp8wuabINfZQRwjbpZndd6zKWmY+r TbJOW8smDJ6cGR4JrSH75e7UHk7TvJQ= -----END CERTIFICATE-----Generated at Sat Mar 21 12:26:24 2026 by rpki-client